CVE-2026-22260

Published: Jan 27, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: security-advisories@github.com (Secondary)

Description

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, Suricata can crash with a stack overflow. Version 8.0.3 patches the issue. As a workaround, use default values for `request-body-limit` and `response-body-limit`.

Affected (1)

Products: Oisf: Suricata

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oisf Suricata	From 8.0.0 to 8.0.3

Related CWEs

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

https://github.com/OISF/suricata/commit/0dddac7278c8b9cf3c1e4c1c71e620a78ec1c185

Source: security-advisories@github.com

Patch

https://github.com/OISF/suricata/security/advisories/GHSA-3gm8-84cm-5x22

Source: security-advisories@github.com

Vendor Advisory

https://redmine.openinfosecfoundation.org/issues/8185

Source: security-advisories@github.com

Permissions Required

Timeline

No history available yet.